Pluginv0.2.0

Static analysis security

Plur1bus · Deterministic local checks for risky code patterns and metadata mismatches.

Scanner verdict

SuspiciousApr 1, 2026, 5:40 PM

Summary: Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration
Reason codes: suspicious.dangerous_execsuspicious.potential_exfiltration
Engine: v2.2.0

Evidence

criticaldist/index.js:10

Shell command execution detected (child_process).

const mounts = execSync("mount", { encoding: "utf-8", timeout: 3000 });

criticaldist/memory.js:51

Shell command execution detected (child_process).

const output = execSync(`grep -rni ${this.shellEscape(query)} ${this.shellEscape(this.mountPath)}/MEMORY.md ${this.shellEscape(this.mountPath)}/memory/ 2>/dev/n...

criticalsrc/index.ts:29

Shell command execution detected (child_process).

const mounts = execSync("mount", { encoding: "utf-8", timeout: 3000 }) as string;

criticalsrc/memory.ts:59

Shell command execution detected (child_process).

const output = execSync(

warndist/index.js:2

File read combined with network send (possible exfiltration).

import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";

warnsrc/index.ts:2

File read combined with network send (possible exfiltration).

import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";